
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft
File: lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft (raw, json)
Hash identifier: Y9hxrYTwKIo2qJY38jYAVdDJrrKRwIUi/b32/AbIbpc=
Subject key identifier: FB:92:DF:7B:83:B6:E7:FF:EC:DE:73:35:49:D8:CE:0A:D7:8E:4B:78
Authority key identifier: 95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C
Certificate issuer: /CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C
Certificate serial: 0545
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft
Manifest number: 0517
Signing time: Fri 18 Sep 2026 23:34:11 +0000
Manifest this update: Fri 18 Sep 2026 23:34:10 +0000
Manifest next update: Fri 25 Sep 2026 23:34:10 +0000
Files and hashes: 1: lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl (hash: L3waR5SCmpHtFia5Xh57Dvgb7kbKB9T9yur0t5wxITc=)
2: F4D295243FDA11EFAF5E676AC4F9AE02.roa (hash: Hy/M1SuzjjtwQCWZGLtJSooNfC63JGvrwCvSA8jmPig=)
3: AFF169A0F34111F0B7AB4BD35C6F56BC.roa (hash: pFySgYfQ+xZ6rwACdfd3mWWdJ/XmIO+H3i8NnPDCsAQ=)
4: E248BDA63C5211EF94184A20C4F9AE02.roa (hash: aoDfXs/+Zo3bM4TZQqdH42AnP+MxbUZEFcCO4REaPpo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl
rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1349 (0x545)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0C8E, serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C
Validity
Not Before: Sep 18 23:34:10 2026 GMT
Not After : Sep 25 23:34:10 2026 GMT
Subject: CN=6aadca73-e27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:93:8c:76:71:e4:79:53:de:80:31:49:58:19:
01:82:16:8a:2d:68:91:7f:31:59:c0:30:cf:44:cf:
be:0b:f5:8b:8e:89:93:c3:45:15:c6:2a:72:67:ca:
51:59:66:c6:f1:73:c7:53:4b:e7:b9:54:73:bf:5e:
50:7c:ac:aa:90:dd:7d:af:58:ca:41:56:70:4e:89:
1d:8c:4e:b6:6c:f7:82:2f:78:75:a8:c3:33:99:5d:
e0:21:9b:58:88:82:04:f4:46:7d:0d:f7:f5:34:b8:
94:f4:78:64:1c:4d:6c:11:0d:50:da:34:86:2f:fc:
44:ec:df:d5:6c:d5:04:32:75:83:51:2f:c3:99:52:
21:54:c8:fa:a5:80:c0:5f:36:e1:9f:90:b1:90:d9:
d0:63:8d:ca:f0:8f:05:74:57:fb:b6:7b:ca:5e:f1:
99:30:4d:7b:73:31:bb:50:f2:d5:54:bb:e8:9f:2d:
36:44:00:22:ec:81:13:48:09:a8:c0:da:a1:56:37:
96:b7:b2:a7:28:14:98:5a:b4:06:0b:d9:18:0e:ef:
17:aa:69:61:d6:fb:e6:c1:a3:2d:c2:ce:6d:52:c3:
28:06:1a:f1:11:f9:d0:11:22:94:83:b3:08:b9:a9:
c5:07:88:f8:7e:6c:c3:b3:ca:ce:93:53:0e:18:10:
fe:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:92:DF:7B:83:B6:E7:FF:EC:DE:73:35:49:D8:CE:0A:D7:8E:4B:78
X509v3 Authority Key Identifier:
keyid:95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:bf:72:ed:66:5d:69:8b:46:24:de:d8:63:c2:2f:2c:07:47:
d3:33:47:ab:bc:98:58:93:ee:c6:58:ab:c0:a3:d8:be:6c:ae:
8a:42:7b:e3:ce:0e:15:22:f0:5f:bb:ce:48:d2:12:55:0c:c8:
fa:27:c3:a2:85:f1:cd:81:9c:a0:eb:cd:a3:96:be:dc:ca:38:
95:12:6f:99:db:52:54:1f:f3:d0:6a:a9:3f:b1:4a:1a:d8:0d:
ba:ff:14:0a:e1:0e:53:20:26:f0:e0:c0:c5:4f:b6:71:9d:1d:
1c:24:1f:9c:f4:51:fb:b0:aa:ae:e2:1f:53:e2:a0:ac:b2:e0:
1a:75:1b:1c:46:5e:f5:d5:3c:c0:e6:a3:c2:1e:ba:14:30:cd:
dc:31:be:0b:43:1b:65:d6:e8:66:fd:29:b1:39:cb:68:6a:91:
a2:bb:0b:f4:41:8e:dc:45:46:dc:27:f3:f9:33:df:72:f1:54:
82:92:3a:09:98:c0:e0:75:a2:18:73:a6:75:9d:5b:37:24:71:
6d:85:24:9a:00:13:3f:f6:be:92:c0:2d:bb:58:21:8a:53:6f:
43:d3:68:4e:16:17:0f:78:b3:24:6a:9f:7a:0b:82:5b:36:47:
2c:4d:9a:eb:a0:b9:c6:de:cb:f3:10:3e:3a:58:64:f9:60:2b:
53:9e:67:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:33:13 2026 by rpki-client